b4e46f384f349d5b70fbb2558ff4deb682d671deb223ef6bce0439d0703f706b | Triage

Sharing

General

Target

b4e46f384f349d5b70fbb2558ff4deb682d671deb223ef6bce0439d0703f706b
Size

316KB
Sample

221021-dtmw9saab6
MD5

4c47f62ae7c8125759cc6615bfad50d0
SHA1

5ecba89ab4962ef7ab0ac5419b2cd385ec8d6df6
SHA256

b4e46f384f349d5b70fbb2558ff4deb682d671deb223ef6bce0439d0703f706b
SHA512

129d11e1623cb03395a7e4feee21a23d04b964a7aadb3e9fec9c12fc00415252e3969dfcf056d51e2bf34c453136d13cda56a879db6149747c37310307653588
SSDEEP

6144:KrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5M:KrdkuveY36kjZP/XKxlSZAHp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  b4e46f384f349d5b70fbb2558ff4deb682d671deb223ef6bce0439d0703f706b
- Size
  
  316KB
- MD5
  
  4c47f62ae7c8125759cc6615bfad50d0
- SHA1
  
  5ecba89ab4962ef7ab0ac5419b2cd385ec8d6df6
- SHA256
  
  b4e46f384f349d5b70fbb2558ff4deb682d671deb223ef6bce0439d0703f706b
- SHA512
  
  129d11e1623cb03395a7e4feee21a23d04b964a7aadb3e9fec9c12fc00415252e3969dfcf056d51e2bf34c453136d13cda56a879db6149747c37310307653588
- SSDEEP
  
  6144:KrYbUzkuvcBYC47l2xa6g4FhwjZd/9d1XKxlo/ecwrHs5M:KrdkuveY36kjZP/XKxlSZAHp
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2